$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft File: BA2WgwOzZPdyp1NXgiDTU34WFm4.mft (raw, json) Hash identifier: z+x/a0LjwlNEnZlU02fD1e/jLHPR5cmIZHL90YU7g7U= Subject key identifier: 5F:1D:5B:B8:10:C5:13:1F:FB:E9:D1:36:96:A5:04:88:0E:5C:0D:20 Authority key identifier: 04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E Certificate issuer: /CN=040D968303B364F772A753578220D3537E16166E Certificate serial: 03E7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft Manifest number: 03E3 Signing time: Fri 04 Jul 2025 22:03:08 +0000 Manifest this update: Fri 04 Jul 2025 22:03:08 +0000 Manifest next update: Sun 06 Jul 2025 22:03:08 +0000 Files and hashes: 1: 2JJi-7EXsdRFhjSaEK5hj-GETe0.roa (hash: yyHc43AGh/VNn9Ig9g4oy6I4TPOMSXEjmfMXKPefsq8=) 2: BA2WgwOzZPdyp1NXgiDTU34WFm4.crl (hash: L1f5s2z9WcZL7mu9jBI0CPz9D77OUVqmMqOiYHvPyvg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 15:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 999 (0x3e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040D968303B364F772A753578220D3537E16166E Validity Not Before: Jul 4 22:03:08 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5F1D5BB810C5131FFBE9D13696A504880E5C0D20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a3:bf:0e:2f:37:e4:94:08:df:59:ec:1a:78: 26:eb:b8:cd:99:22:f3:b4:66:9d:37:ad:0d:48:08: a3:9d:09:5e:a5:13:ea:85:78:a5:d7:30:75:8d:0a: 99:ef:fb:8a:54:8b:0f:fc:0e:e7:ed:cc:05:5f:2a: c3:76:4f:9e:33:53:57:62:41:eb:1e:05:0e:c9:28: 04:e6:3a:37:8d:51:26:88:b9:81:07:8e:b7:04:39: 6b:08:26:25:6f:e8:76:cd:f9:2b:44:24:9b:35:16: 0c:ae:fe:57:89:24:ab:2d:5c:eb:27:18:db:b9:ad: 2a:0f:70:c0:ce:f9:b3:49:1f:d0:72:28:55:ea:58: 93:95:ba:6b:7e:ad:39:67:7a:0c:20:f1:46:89:83: 5a:22:a8:37:db:45:26:9a:d7:95:a0:6f:2c:95:a6: 76:58:54:4a:e1:51:02:e4:f8:ba:d8:1f:fb:10:c7: f1:8f:8b:fe:10:b7:6c:8e:c4:b0:f4:d0:f2:c5:91: 74:1d:65:c2:f8:59:08:0a:bc:bf:95:80:e9:84:82: 04:36:a9:c6:cc:aa:03:0f:ac:76:6a:bf:a0:28:35: 95:b9:5f:43:91:88:f1:28:a2:2e:a8:f8:cb:ce:d8: 14:21:98:d0:5d:49:60:e0:ff:5d:ea:b1:cb:bc:96: bc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1D:5B:B8:10:C5:13:1F:FB:E9:D1:36:96:A5:04:88:0E:5C:0D:20 X509v3 Authority Key Identifier: keyid:04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:fd:11:98:1a:67:4a:bf:0d:b8:94:c6:3f:15:06:09:78:d3: 65:c7:e5:09:d8:16:fd:9f:53:43:83:9f:ae:cd:52:06:41:67: aa:df:17:a5:26:a6:43:5e:53:7b:29:ec:a3:3d:2f:64:60:20: 9e:b1:fd:59:8b:8d:1d:e7:29:a7:46:21:5a:e9:7f:bc:1b:66: 47:48:66:bb:27:c4:df:a8:97:7c:ea:5f:22:27:56:83:75:c2: 84:75:a9:5e:92:33:9b:68:9b:d3:87:25:f0:29:e0:44:d1:60: 31:9a:ce:72:4c:ed:93:b4:21:59:dc:22:62:71:a5:d0:f6:0e: 6d:39:88:f8:df:c0:9b:55:05:64:2a:ed:d2:b6:60:74:5f:16: 60:f4:0d:2e:62:f6:dc:b5:d2:a3:a8:0a:7e:f1:45:26:dc:61: ba:fd:b2:22:37:f3:19:7d:94:47:04:df:7a:90:ad:29:4e:fb: b4:9d:f9:49:b7:ab:98:a6:33:27:df:c9:2e:a8:8d:b0:09:a8: e5:bc:2a:55:bd:ec:ff:cc:1c:16:f2:45:09:90:4f:ef:6e:18: f5:72:aa:f8:63:e2:b2:55:55:5d:cf:6e:0b:00:1e:69:82:64: 65:ed:a6:9d:70:22:0b:0c:b8:48:7d:36:f4:1e:fc:31:14:89: 54:d8:97:8d -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICA+cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDQw RDk2ODMwM0IzNjRGNzcyQTc1MzU3ODIyMEQzNTM3RTE2MTY2RTAeFw0yNTA3MDQy MjAzMDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVGMUQ1QkI4MTBDNTEz MUZGQkU5RDEzNjk2QTUwNDg4MEU1QzBEMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1o78OLzfklAjfWewaeCbruM2ZIvO0Zp03rQ1ICKOdCV6lE+qF eKXXMHWNCpnv+4pUiw/8DuftzAVfKsN2T54zU1diQeseBQ7JKATmOjeNUSaIuYEH jrcEOWsIJiVv6HbN+StEJJs1Fgyu/leJJKstXOsnGNu5rSoPcMDO+bNJH9ByKFXq WJOVumt+rTlnegwg8UaJg1oiqDfbRSaa15WgbyyVpnZYVErhUQLk+LrYH/sQx/GP i/4Qt2yOxLD00PLFkXQdZcL4WQgKvL+VgOmEggQ2qcbMqgMPrHZqv6AoNZW5X0OR iPEooi6o+MvO2BQhmNBdSWDg/13qscu8lrxnAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUXx1buBDFEx/76dE2lqUEiA5cDSAwHwYDVR0jBBgwFoAUBA2WgwOzZPdyp1NX giDTU34WFm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lBTkdZ VS9CQTJXZ3dPelpQZHlwMU5YZ2lEVFUzNFdGbTQuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0JBMldnd096WlBkeXAxTlhnaURUVTM0V0ZtNC5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NJQU5HWVUvQkEyV2d3T3paUGR5cDFO WGdpRFRVMzRXRm00Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB ANr9EZgaZ0q/DbiUxj8VBgl402XH5QnYFv2fU0ODn67NUgZBZ6rfF6UmpkNeU3sp 7KM9L2RgIJ6x/VmLjR3nKadGIVrpf7wbZkdIZrsnxN+ol3zqXyInVoN1woR1qV6S M5tom9OHJfAp4ETRYDGaznJM7ZO0IVncImJxpdD2Dm05iPjfwJtVBWQq7dK2YHRf FmD0DS5i9ty10qOoCn7xRSbcYbr9siI38xl9lEcE33qQrSlO+7Sd+Um3q5imMyff yS6ojbAJqOW8KlW97P/MHBbyRQmQT+9uGPVyqvhj4rJVVV3PbgsAHmmCZGXtpp1w IgsMuEh9NvQe/DEUiVTYl40= -----END CERTIFICATE-----Generated at Sat Jul 5 13:01:49 2025 by rpki-client